Reputation
331
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 12
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 8 votes cast
1d
comment Postfix - mynetworks listing options
Why would you use hash-style for networks, instead of the special cidr-type?
Jun
27
comment How to get variables in one define from another?
Wait, is not that the very purpose of getvar()?..
Jun
26
comment How to get variables in one define from another?
Thanks for the warning -- I will ensure the order base->vhost. But, still, what is the proper way to refer to a particular instance of apache::base with getvar()?
Jun
24
comment How to get variables in one define from another?
The "such a thing is not implemented" is the most valuable part of your answer, Felix. Thank you... But are you sure? Is not getvar() supposed to do just that -- if invoked properly?
Jun
2
comment How to properly configure security group at AWS?
tcpdump on the client lists no responses at all. iptables on the server is fully permissive (no rules whatsoever). Michael, yes, this server is on a VPC -- but with an Elastic IP of its own. What rules should I check? Normally, we don't allow any external traffic to the, so the fact that I'm seeing something reaching this server lead me to believe, I enabled the proper exceptions... No?
Jun
2
comment How to properly configure security group at AWS?
Does not say anything -- the initial connection is never established... Tcpdump reports packets arriving to the server and responses being sent, but the client never hears them for some reason. The client is simple command-line ftp el.ast.ic.ip
Mar
25
comment EC2 save mdadm RAID setup in an AMI
You don't want the ephemeral devices be part of your mdadm-managed array. Using ZFS -- with ephemeral device(s) being caches -- should work much better for you. See serverfault.com/questions/663774/…
Feb
25
comment How to create a multi-domain self-signed certificate for Apache2?
At the time of this writing, the loftninjas.org link above is active (again).
Feb
3
comment How to best use Amazon's “ephemeral” SSD devices under Linux?
My question asks, whether there is any kind of "best practices" guide already. I list the options I could come up with to prevent people from wasting time relisting them...
Jan
30
comment ephemeral vs EBS partitions
Any idea on [how to distinguish the "ephemeral" volume(s) from the others from inside the VM][1]? Thanks! [1]: serverfault.com/questions/663183/…
Jan
28
comment How to reliably list ephemeral storage of an AWS instance?
Well, there is no /dev/xvdj either -- on this particular instance -- there is only /dev/xvdn.
Nov
25
comment Why would Puppet revoke a client's certificate?
Shane, using Apache. That openssl command -- run on one of the clients -- produced a lot of output. The revocations listed all claim Key Compromise as the reason and some of the dates go back to 2013...
Nov
25
comment Why would Puppet revoke a client's certificate?
Shane, no the "revoked" entries are the only ones for each host involved.
Nov
25
comment Why would Puppet revoke a client's certificate?
No, actually -- most of the hosts involved are new and their certs are only a few months old. Besides, they aren't listed as "expired" -- but rather as "revoked".
Nov
1
comment Why did git stop working after server disabled SSLv3?
The discussion just resumed after a couple of days of quiet -- it may be, the above patch will not be final after all. But it works :) Here is a link to one of online archives of HTTPD dev-mailing lists: mail-archive.com/dev%40httpd.apache.org/msg60833.html
Oct
30
comment Disabling SSLv3 but still supporting SSLv2Hello in Apache
Yes, that appears to be, what Apache developers are considering. See the [thread][1] I started there... [1]mail-archives.apache.org/mod_mbox/httpd-dev/201410.mbox/…
Oct
28
comment Disabling SSLv3 but still supporting SSLv2Hello in Apache
I can confirm, that Chris' patch helps -- curl (and libcurl-using programs such as git) can now talk to our server again, despite SSLv3 having been disabled -- without sslscan flagging any vulnerabilities. But the patch seems somewhat invasive and I'd like to ask Chris to submit it to Apache project for review ASAP. I'll file a ticket myself, if Chris does not :-) Thank you very much, Chris!
Oct
28
comment Why did git stop working after server disabled SSLv3?
That what I thought until I tested the same git against github -- which offers the exact same protocol-collection -- and found, that that worked...
Sep
6
comment How to monitor GlusterFS clients?
What will populate the SNMP information? I'm not asking for monitoring framework -- we have one already. I'm wondering, what to look for -- not how. Information from logs? Anything in particular I should look for? Thanks!
Jun
24
comment How to best backup AWS-hosted systems?
No, I do not need much replication of the backups. What I do need is what I listed in my question -- the four items. Thanks!